A soft lockup existed in the handling of ack vector records. Specifically, when a tail of the list of ack vector records was removed, it was possible to end up iterating infinitely on an element of the tail.
Signed-off-by: Andrea Bittau <[EMAIL PROTECTED]> --- diff --git a/net/dccp/ackvec.c b/net/dccp/ackvec.c index 2349078..a856d72 100644 --- a/net/dccp/ackvec.c +++ b/net/dccp/ackvec.c @@ -453,6 +453,7 @@ #endif (unsigned long long) avr->dccpavr_ack_ackno); dccp_ackvec_throw_record(av, avr); + break; } /* * If it wasn't received, continue scanning... we might - To unsubscribe from this list: send the line "unsubscribe dccp" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html